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DETAILED ACTION 

Response to Amendment 

1. Applicant's amendment filed 1 1 May 2009 amends claims 177 and 187. Applicant's 
amendment has been fully considered and entered. 

Response to Arguments 

2. Applicant argues, "the Examiner does not assert that Rabin et al. teach [sic] automatedly 
searching one or more portions of the target file for the occurrence of one or more first source 
elements in accordance with said key as set forth in currently amended claims 177 and 187." 
This argument is not persuasive because Rabin discloses that if supervising program discovers 
that the software is untagged, a fingerprint of the software is computing using selected portions 
of the software and storing the fingerprint in a fingerprint table of the user device (Col. 20, lines 
63-65). A verification program, resident on the guardian center, compares each fingerprint 
received from the user device against the fingerprints in its fingerprint data structure to determine 
if an untagged instance of software used on a user device is an infringing instance of software 
(Col. 21, lines 3-8). Furthermore, it is well settled that it is not "invention" to broadly provide a 
mechanical or automatic means to replace manual activity which has accomplished the same 
result. InreVenner, 120 USPQ 192. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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4. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

5. Claims 177-187 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rabin by 
U.S. Patent No. 6,697,948, in view of Stratigos, U.S. Patent No. 5,537,486. Referring to claim 
177, Rabin discloses an information protection system wherein copyright protection of vendor 
created software is provided using detection and verification programs. The vendor created 
software is distributed with a supervising program that detects whether the software contains an 
appropriate tag (Col. 20, lines 61-63). If the supervising program discovers that the software is 
untagged, a fingerprint of the software is computing using selected portions of the software and 
storing the fingerprint in a fingerprint table of the user device (Col. 20, lines 63-65). A guardian 
center that includes a fingerprint data structure, and receives all fingerprints from the user 
devices for each untagged instance of software installed on user devices (Col. 20, line 65 - Col. 
21, line 3), which meets the limitation of a data management server system that receives a source 
file for registration and a target file for comparison with the source file. The fingerprints are 
generated from selected portions of the software (Col. 20, lines 63-64), which meets the 
limitation of a key generation system that generates a key for the source file by identifying a 
predetermined number of source elements in the source file as first source elements. The 
software vendor identifier can be embedded in the software as a tag (Col. 36, lines 13-16), which 
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meets the limitation of a data embedding system that embeds an information block into the 
source file, said information block including information pertaining to ownership of intellectual 
property rights. The fingerprint data structure stored in the guardian center can be stored along 
with the software in a database (Col. 5, lines 8-10 & Figure 2 element 300), which meets the 
limitation of a database system that stores the source file with the embedded information block, 
said key, the first source elements, and ownership information of the source file. A verification 
program, resident on the guardian center, compares each fingerprint received from the user 
device against the fingerprints in its fingerprint data structure to determine if an untagged 
instance of software used on a user device is an infringing instance of software (Col. 21, lines 3- 
8), which meets the limitation of a source print detection system that automatedly searches one 
or more portions of the target file for the occurrence of one or more first source elements in 
accordance with said first unique data identifier and that determines whether coincidence exists 
between the first source elements in the source file and the target elements in the target file. If 
the verification program determines that the fingerprints match, punitive action is performed 
(Col. 58, lines 7-19). One form of punitive action is the notification of the software vendor that 
created the software (Col. 58, lines 20-23), which meets the limitation of wherein the data 
management system accesses ownership information to notify an owner of the source file if a 
first preselected coincidence level exists between the first source elements and the target 
elements. Rabin discloses that if the supervising program discovers that the software is untagged, 
a fingerprint of the software is computing using selected portions of the software and storing the 
fingerprint in a fingerprint table of the user device (Col. 20, lines 63-65). A fingerprint is a 
unique encoding of one or more portions or data areas selected from an instance of software 
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(Col. 36, lines 52-54). Including a fingerprint of an instance of software within a tag associated 
with that instance permits a supervising program in a user device to verify that the association 
between the instance of software and the tag is correct by performing a same location 
fingerprint check on the instance of software and comparing with the list of fingerprints in the 
associated tag (Col. 36, lines 58-65). This shows that the fingerprints are generating using the 
same formula or extraction rule, because if you want to compare the fingerprints to determine if 
instances of software are the same, you would want to extract the same portions of that software 
for comparison. Otherwise, if you extracted different portions for comparison, the instances of 
software could be exact copies yet not result in a match upon comparison, which meets the 
limitation of a source print generation system that applies said first unique data identifier to the 
source file and extracts the first source elements from the source file in accordance with said key. 
Furthermore, this fingerprint would be associated with the extraction rule used in its creation. 
Otherwise, the supervising program would not know which portions of the instance of software 
to extract in order to compare the fingerprints as taught in Rabin (Col. 36, lines 61-65). Rabin 
discloses that the invention is applicable to images (Col. 2, lines 50-53), but does not specify 
visually inspecting the images when a positive comparison is made. Stratigos discloses a 
document verification system wherein images of the document are first processed by a computer 
and then sent to a workstation to be visually examined (Col. 4, lines 12-19), which meets the 
limitation of visually compared to determine a level of similarity between files. It would have 
been obvious to one of ordinary skill in the art at the time the invention was made for the suspect 
and target images of Rabin to be visually examined after being identified as similar in order to 
provide an additional layer of confirmation as taught by Stratigos (Col. 4, lines 12-19). 
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Referring to claim 178, Rabin discloses that the fingerprint data structure stored in the 
guardian center can be stored along with the software in a database (Col. 5, lines 8-10 & Figure 2 
element 300), which meets the limitation of said database system is at least partially incorporated 
with said data management server system. 

Referring to claim 179, Rabin discloses that the fingerprints are generated from selected 
portions of the software (Col. 20, lines 63-64), which meets the limitation of said source print 
generation system extracts the first source elements being defined by element characteristics 
selected from the group consisting of an element size, an element start position, and an element 
initial position relative to said element start position. 

Referring to claims 180-181, Rabin discloses that the embedded tags include user-defined 
information (Col. 36, lines 30-32) and that these tags can be digitally signed (Col. 36, lines 2-4 & 
Col. 40, lines 43-47), which meets the limitation of said user-defined information is at least 
partially encrypted. 

Referring to claims 182-183, Rabin discloses that the embedded tags can include usage 
information (Col. 35, lines 14-17), user device id (Col. 36, lines 30-33 & Col. 44, lines 1-8), 
software identifier (Col. 37, lines 40-45), which meets the limitations of mandatory compliance 
information, authorized user information, a file description, said mandatory compliance 
information includes information selected from the group consisting of identification 
information, custodial information. 

Referring to claim 184, Rabin discloses that the guardian server communicates with 
external computers (Figures 1 & 2), which meets the limitation of said data management system 
is in communication with at least one external computer system. 
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Referring to claim 185, Rabin discloses that the tag server and guardian server may be 
bodily incorporated into the software vendor computer system (Col. 27, lines 48-50), which 
meets the limitation of the data management system. The software vendor distributes the 
software to the user's (Figure 2, elements 111 & 112), which meets the limitation of said data 
management server system provides the source file with said embedded information block to 
authorize users associated with one or more of the at least one external computer system. 

Referring to claim 186, Rabin discloses that the guardian server contains a verification 
program that communications with a supervising program on the individual user devices to 
locate target files for comparison against the original source files (Col. 20, line 63 - Col. 21, line 
8), which meets the limitation of said source print detection system includes a search member 
that searches one or more of the at least one external computer system for target files to be 
compared with the source files. 

Referring to claim 187, Rabin discloses an information protection system wherein 
copyright protection of vendor created software is provided using detection and verification 
programs. The vendor created software is distributed with a supervising program that detects 
whether the software contains an appropriate tag (Col. 20, lines 61-63). If the supervising 
program discovers that the software is untagged, a fingerprint of the software is computing using 
selected portions of the software and storing the fingerprint in a fingerprint table of the user 
device (Col. 20, lines 63-65). A guardian center that includes a fingerprint data structure, and 
receives all fingerprints from the user devices for each untagged instance of software installed on 
user devices (Col. 20, line 65 - Col. 21, line 3), which meets the limitation of receiving a source 
file for registration and a target file for comparison with the source file. The fingerprints are 
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generated from selected portions of the software (Col. 20, lines 63-64), which meets the 
generating a key for the source file by identifying a predetermined number of source elements in 
the source file as first source elements. The software vendor identifier can be embedded in the 
software as a tag (Col. 36, lines 13-16), which meets the limitation of embedding an information 
block into the source file, said information block including information pertaining to ownership 
of intellectual property rights. The fingerprint data structure stored in the guardian center can be 
stored along with the software in a database (Col. 5, lines 8-10 & Figure 2 element 300), which 
meets the limitation of storing the source file with the embedded information block, said key, the 
first source elements, and ownership information of the source file. A verification program, 
resident on the guardian center, compares each fingerprint received from the user device against 
the fingerprints in its fingerprint data structure to determine if an untagged instance of software 
used on a user device is an infringing instance of software (Col. 21, lines 3-8), which meets the 
limitation of automatedly searching one or more portions of the target file for the occurrence of 
one or more the first source elements in accordance with said key and determining whether 
coincidence exists between the first source elements in the source file and the target elements in 
the target file. If the verification program determines that the fingerprints match, punitive action 
is performed (Col. 58, lines 7-19). One form of punitive action is the notification of the software 
vendor that created the software (Col. 58, lines 20-23), which meets the limitation of accessing 
ownership information to notify an owner of the source file if a first preselected coincidence 
level exists between the first source elements and the target elements. Rabin discloses that if the 
supervising program discovers that the software is untagged, a fingerprint of the software is 
computing using selected portions of the software and storing the fingerprint in a fingerprint 



Application/Control Number: 09/670,242 Page 9 

Art Unit: 2432 

table of the user device (Col. 20, lines 63-65). A fingerprint is a unique encoding of one or more 
portions or data areas selected from an instance of software (Col. 36, lines 52-54). Including a 
fingerprint of an instance of software within a tag associated with that instance permits a 
supervising program in a user device to verify that the association between the instance of 
software and the tag is correct by performing a same location fingerprint check on the instance 
of software and comparing with the list of fingerprints in the associated tag (Col. 36, lines 58- 
65). This shows that the fingerprints are generating using the same formula or extraction rule, 
because if you want to compare the fingerprints to determine if instances of software are the 
same, you would want to extract the same portions of that software for comparison. Otherwise, if 
you extracted different portions for comparison, the instances of software could be exact copies 
yet not result in a match upon comparison, which meets the limitation of applying said key to the 
source file, extracting the first source elements from the source file in accordance with said key. 
Furthermore, this fingerprint would be associated with the extraction rule used in its creation. 
Otherwise, the supervising program would not know which portions of the instance of software 
to extract in order to compare the fingerprints as taught in Rabin (Col. 36, lines 61-65). Rabin 
discloses that the invention is applicable to images (Col. 2, lines 50-53), but does not specify 
visually inspecting the images when a positive comparison is made. Stratigos discloses a 
document verification system wherein images of the document are first processed by a computer 
and then sent to a workstation to be visually examined (Col. 4, lines 12-19), which meets the 
limitation of visually compared to determine a level of similarity between files. It would have 
been obvious to one of ordinary skill in the art at the time the invention was made for the suspect 
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and target images of Rabin to be visually examined after being identified as similar in order to 
provide an additional layer of confirmation as taught by Stratigos (Col. 4, lines 12-19). 

Referring to claims 188-189, Rabin discloses that the fingerprints are generated from 
selected portions of the software (Col. 20, lines 63-64), which meets the limitation of said 
generating said key includes providing at least one data parameter associated with a selected 
characteristic of said key and incorporating said at least one data parameter into said key, said 
source print generation system extracts the first source elements being defined by element 
characteristics selected from the group consisting of an element size, an element start position, 
and an element initial position relative to said element start position. 

Referring to claim 190, Rabin discloses that the software can contain hashes (Col. 3, line 
66 - Col. 4, line 9), which meets the limitation of the source file having data in a compressed 
format. 

Referring to claim 191, Rabin discloses that the fingerprints are generated from the non- 
hashed information within the software (Col. 20, lines 63-64), which meets the limitation of 
extracting the source elements includes expanding the data of the source file. 

Referring to claim 192, Rabin discloses generating concatenated information from the 
software (Col. 12, lines 33-39), which meets the limitation of said extracting the source elements 
includes forming a concatenated string of the source elements. 

Referring to claim 193, Rabin discloses that the fingerprinting procedure can be 
standardized (Col. 4, lines 24-31), which meets the limitation of normalizing data of the source 
file and extracting the normalized data form the source file. 
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Referring to claim 194, Rabin discloses that the embedded tags include user-defined 
information (Col. 36, lines 30-32) and that these tags can be digitally signed (Col. 36, lines 2-4 & 
Col. 40, lines 43-47), which meets the limitation of partially encrypting said information block. 

Referring to claim 195, Rabin discloses that the guardian server communicates with 
external computers (Figures 1 & 2), which meets the limitation of receiving said source file 
includes communicating with an external computer system. 

Referring to claim 196, Rabin discloses that the guardian server contains a verification 
program that communications with a supervising program on the individual user devices to 
locate target files for comparison against the original source files (Col. 20, line 63 - Col. 21, line 
8), which meets the limitation of searching one or more of the at least external computer system 
for target files to be compared with the source file. 

Referring to claim 197, Rabin discloses that the tag server and guardian server may be 
bodily incorporated into the software vendor computer system (Col. 27, lines 48-50), which 
meets the limitation of the data management system. The software vendor distributes the 
software to the user's (Figure 2, elements 111 & 112), which meets the limitation of providing 
the source file with said embedded information block to authorized users associated with one or 
more of the at least one external computer system. 

Referring to claim 198, Rabin discloses that fingerprinting involves a mathematical 
function for mapping data to smaller data (Col. 30, lines 26-27), which meets the limitation of 
said extracting the first source elements comprises extracting the first source elements from the 
source file via compression specific element extraction. 
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6. Claims 199-201 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rabin, 
U.S. Patent No. 6,697,948, in view of Stratigos, U.S. Patent No. 5,537,486, and further in view 
of Agrawal, U.S. Patent No. 5,647,058. Referring to claims 199-201, Rabin discloses that the 
software can be video data (Col. 2, lines 50-52) and that the fingerprinting involves a 
mathematical function for mapping data to smaller data (Col. 30, lines 26-27), which meets the 
limitation of said receiving the source file includes receiving a source file with a plurality data 
values, said receiving a source file includes receiving a video source file with a plurality of red- 
green-blue (RGB) data values. Rabin does not disclose fingerprinting the video data by 
calculating an average value of the RGB data values of portions of the video data. Agrawal 
discloses a method of indexing a multi-media database wherein video data is fingerprinted using 
the average of RGB color features (Col. 6, lines 28-38), which meets the limitations of said 
extracting the first source elements comprises extracting the first source elements from the 
source file via non-compression specific extraction, wherein said extracting the first source 
elements includes calculating an average value of the data values for each of the first source 
elements, wherein said calculating the average value of the data values comprises calculating an 
average value of the RGB data values for each of the first source elements. It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to fingerprint the 
video data of Rabin using the average of the video RGB data values in order to create indexes for 
the database that provide similarity characteristics (Agrawal: Col. 2, lines 3-16) such that 
efficient searching of the database can be achieved as taught by Agrawal (Agrawal Col. 2, lines 
38-49). 

Conclusion 
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7. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BENJAMIN E. LANIER whose telephone number is (571)272- 
3805. The examiner can normally be reached on M-Th 7:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2432 



